Summary
Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.
Security Fix(es):
* squid: squid: Request Smuggling in HTTP Transfer-Encoding (CVE-2026-61642)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | squid | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debuginfo | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debuginfo | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debuginfo | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debuginfo | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debugsource | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debugsource | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debugsource | 7:6.10-15.el10_3.1 |
| Rocky Linux · 10 | squid-debugsource | 7:6.10-15.el10_3.1 |
Vulnerabilities 1
-
High 7.7
Squid Request Smuggling in HTTP Transfer-Encoding
Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing (`src/HttpHeader.cc`) accept…